SOC Detection engineer

: SOC Engineer - Detection Rules Developer (Azure sentinel)

Location

: Paris

About Us

My client is seeking a skilled SOC Engineer to enhance our security posture by developing detection rules in the Azure Sentinel environment and Microsoft 365.

Role Overview

As a SOC Engineer specializing in detection rules, you will focus on leveraging Kusto Query Language (KQL) to create robust detection mechanisms within Azure Sentinel and the O365 ecosystem. Your expertise will help us identify, respond to, and mitigate security threats effectively.

Key Responsibilities

Detection Rule Development

: Design, implement, and optimize detection rules in Azure Sentinel using KQL to monitor for suspicious activities and threats in real time.

O365 Security Management

: Develop and manage detection rules for Microsoft 365 applications, including SharePoint, Exchange, and Teams, to safeguard against threats like phishing and unauthorized access.

Incident Investigation

: Collaborate with the incident response team to analyze alerts generated by detection rules, providing insights and recommendations for remediation.

Threat Intelligence Integration

: Incorporate threat intelligence feeds and reports to enhance detection capabilities and proactively address emerging threats.

Performance Tuning

: Continuously refine and tune detection rules to reduce false positives while improving detection accuracy based on evolving threat patterns.

• share

Related jobs

Founding Security Engineer

Practice
Cloud & Infrastructure
Location
San Francisco - - - None Specified -
Type
Permanent
As our first Security Engineer, you'll: Architect our entire security infrastructure from scratch, working directly with our engineering team, Ch...
Explore this job

SOC Analyst

Practice
Cloud & Infrastructure
Location
Utrectcht - - Netherlands
Type
Contract
Our client is seeking a SOC Analyst for a long-term contract position in the Utrecht area. This person will be responsible for proactively and iterati...

Explore this job

SOC Analyst

Practice
Cloud & Infrastructure
Location
Brussels, BELGIUM 1210 - Belgium
Type
Contract
SOC Analyst L3 – Hybrid – 1+ year contact (12 month renewable) Your future job: Cyber Defence Security Logging & Monitoring ExpertThe purpos...
Explore this job

Telecome Security Architect

Practice
Cloud & Infrastructure
Location
FRANCE - - France
Type
Contract
FREELANCE IN FRANCE ONLY Telecom Security Architect 6G Project! The Team:The MN RAN Business Group leads in wireless mobility networks with a ...
Explore this job

Security Specialist

Practice
Cloud & Infrastructure
Location
Paris - - France
Type
Contract
Job Title: Security Specialist Location: Gouda Languages Required: Dutch Duration: 12 month (open to extension) Hybrid working: 75/25 home/office Star...

Explore this job

Security Risk & Controls Specialist

Practice
Cloud & Infrastructure
Location
Brussels, - Belgium
Type
Contract
Security Risk & Controls Specialist - Brussels/Hybrid - 1+ year contract Are you an experienced IT Risk & Security professional looking for a ...
meer...

Naar vacature

Meer vacatures van Next Ventures